diff --git a/next.config.js b/next.config.js
index 54ea7e5ff..14525128e 100644
--- a/next.config.js
+++ b/next.config.js
@@ -15,7 +15,6 @@ const contentSecurityPolicy = `
  connect-src * cloudflareinsights.com;
  font-src 'self' fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/latest/fonts/fontawesome-webfont.woff2;
  frame-src https://dev.lhowsam.com https://lhowsam.com;
- Access-Control-Allow-Origin: *;
 `;
 
 const securityHeaders = [
@@ -50,6 +49,10 @@ const securityHeaders = [
     key: 'Permissions-Policy',
     value: 'camera=(), microphone=(), geolocation=()',
   },
+  {
+    key: 'Access-Control-Allow-Origin',
+    value: '*',
+  },
 ];
 
 /**